Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

(nnn stores homelen variable as uchar_t, which can only represent value ...)

nnn uses an unsigned char (uchar_t) type for the homelen variable, limiting it to values between 0 and 255. When an attacker controls the HOME environment variable with a length exceeding this range, the length is truncated, and the expression (homelen - 1) is promoted to a signed integer, becoming -1. This leads to an out-of-bounds read and write one byte before the allocated path buffer. The vulnerability was confirmed in version 5.2, but no explicit affected version range or patch information is available from the maintainer.

Detailed information about nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. (CVE-2026-65610). Get real-time updates, 

nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. (CVE-2026-65610) - Live Threat Intelligence - Threat Radar | OffSeq.com

(nnn stores homelen variable as uchar_t, which can only represent value ...) (CVE-2026-65610)

(nnn does not sanitize the path variable. An attacker can createa direc ...)

nnn suffers from a command injection vulnerability (CWE-78) due to improper sanitization of the path variable. An attacker can create a directory with a name containing a single quote followed by shell commands on a shared filesystem, removable media, or extracted archive. When a victim navigates into this directory and performs batch copy or move operations, the crafted directory name is embedded into a shell command, leading to execution of the injected payload with the privileges of the nnn process. The vulnerability was confirmed in version 5.2, but no specific affected version range or patch information is provided by the maintainer.

Detailed information about nnn does not sanitize the path variable. (CVE-2026-65611). Get real-time updates, technical details, and mitigation strategies.

nnn does not sanitize the path variable. (CVE-2026-65611) - Live Threat Intelligence - Threat Radar | OffSeq.com

(nnn does not sanitize the path variable. (CVE-2026-65611)

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_cmd_as_plugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is 2f07ccdf21e705377862e5f9dfa31e1694979ac7. It is suggested to install a patch to address this issue.

CVE-2025-13566 is a vulnerability identified in the 'nnn' terminal file manager, versions 5.0 and 5.1. The issue arises from a double free condition in the functions show_content_in_floating_window and run_cmd_as_plugin within the source file nnn/src/nnn.c. A double free occurs when the program attempts to free the same memory location twice, leading to memory corruption, which can cause crashes or potentially be leveraged for arbitrary code execution. However, exploitation requires local access with low privileges and does not require user interaction, limiting the attack vector to local users or processes with some level of access. The vulnerability does not impact confidentiality, integrity, or availability directly but can lead to denial of service or local privilege escalation if combined with other vulnerabilities. The patch identified by commit 2f07ccdf21e705377862e5f9dfa31e1694979ac7 addresses this issue by correcting the memory management logic to prevent the double free. No public exploits have been reported, indicating limited active exploitation. The CVSS 4.8 score reflects a medium severity, considering the local attack vector and the requirement for privileges. The vulnerability is relevant primarily to Linux environments where 'nnn' is used as a lightweight file manager, often favored by developers and system administrators.

Detailed information about CVE-2025-13566: Double Free in jarun nnn affecting jarun nnn. Get real-time updates, technical details, and mitigation strategies.


(nnn stores homelen variable as uchar_t, which can only represent value ...) (CVE-2026-65610)CVE-2026-65610 0 (nnn stores homelen variable as uchar_t, which can only represent value ...) MediumVulnerability#gcve #osv #ghsa-2fq9-p2vj-rc2v Join the discussion	GCVE Database	08/20/2026, 00:00:00 UTC Added: 08/19/2026, 17:55:48 UTC
(nnn does not sanitize the path variable. (CVE-2026-65611)CVE-2026-65611 0 (nnn does not sanitize the path variable. An attacker can createa direc ...) MediumVulnerability#gcve #osv #ghsa-p5rm-3fq7-7mvj Join the discussion	GCVE Database	08/20/2026, 00:00:00 UTC Added: 08/19/2026, 17:55:46 UTC
CVE-2025-13566: Double Free in jarun nnnCVE-2025-13566 0 A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_floating_window/run_cmd_as_plugin of the file nnn/src/nnn.c. The manipulation leads to double free. An attack has to be approached locally. The identifier of the patch is 2f07ccdf21e705377862e5f9dfa31e1694979ac7. It is suggested to install a patch to address this issue. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-13566 Join the discussion	CVE Database V5	11/23/2025, 19:32:07 UTC Added: 11/23/2025, 19:45:01 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional